Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. 2025/10/20 08:10:23 parsed 1 programs [ 28.447421][ T36] audit: type=1400 audit(1760947823.760:64): avc: denied { node_bind } for pid=291 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.935333][ T36] audit: type=1400 audit(1760947825.250:65): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.936779][ T299] cgroup: Unknown subsys name 'net' [ 29.958116][ T36] audit: type=1400 audit(1760947825.250:66): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.985414][ T36] audit: type=1400 audit(1760947825.290:67): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.985654][ T299] cgroup: Unknown subsys name 'devices' [ 30.093593][ T299] cgroup: Unknown subsys name 'hugetlb' [ 30.099230][ T299] cgroup: Unknown subsys name 'rlimit' [ 30.243201][ T36] audit: type=1400 audit(1760947825.560:68): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.266509][ T36] audit: type=1400 audit(1760947825.560:69): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.286928][ T36] audit: type=1400 audit(1760947825.560:70): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.307415][ T36] audit: type=1400 audit(1760947825.560:71): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.318858][ T301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.328048][ T36] audit: type=1400 audit(1760947825.560:72): avc: denied { sys_module } for pid=299 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 30.358199][ T36] audit: type=1400 audit(1760947825.560:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.394797][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.294878][ T304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.528287][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.535411][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.542563][ T318] bridge_slave_0: entered allmulticast mode [ 31.549039][ T318] bridge_slave_0: entered promiscuous mode [ 31.555743][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.562870][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.570054][ T318] bridge_slave_1: entered allmulticast mode [ 31.576501][ T318] bridge_slave_1: entered promiscuous mode [ 31.628876][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.635985][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.643370][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.650415][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.674811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.684470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.691579][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.717354][ T318] veth0_vlan: entered promiscuous mode [ 31.728405][ T318] veth1_macvtap: entered promiscuous mode [ 31.894729][ T46] bridge_slave_1: left allmulticast mode [ 31.900447][ T46] bridge_slave_1: left promiscuous mode [ 31.906193][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.913987][ T46] bridge_slave_0: left allmulticast mode [ 31.919651][ T46] bridge_slave_0: left promiscuous mode [ 31.925377][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.082916][ T46] veth1_macvtap: left promiscuous mode [ 32.088506][ T46] veth0_vlan: left promiscuous mode 2025/10/20 08:10:28 executed programs: 0 [ 32.848214][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.855520][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.862919][ T372] bridge_slave_0: entered allmulticast mode [ 32.869443][ T372] bridge_slave_0: entered promiscuous mode [ 32.876972][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.884094][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.891209][ T372] bridge_slave_1: entered allmulticast mode [ 32.897499][ T372] bridge_slave_1: entered promiscuous mode [ 32.947628][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.954715][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.962019][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.969060][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.990968][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.998384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.007986][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.015075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.025035][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.032123][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.056461][ T372] veth0_vlan: entered promiscuous mode [ 33.067296][ T372] veth1_macvtap: entered promiscuous mode [ 33.099189][ T372] ------------[ cut here ]------------ [ 33.104773][ T372] WARNING: CPU: 1 PID: 372 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 33.112796][ T372] Modules linked in: [ 33.116747][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz-executor Not tainted syzkaller #0 13e4930ead2c4bb99e6e1e727baa5d081f82ad96 [ 33.128562][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.138689][ T372] RIP: 0010:drop_nlink+0xce/0x110 [ 33.143771][ T372] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 33.163670][ T372] RSP: 0018:ffffc90001affc60 EFLAGS: 00010293 [ 33.169780][ T372] RAX: ffffffff81ee1a7e RBX: ffff88812d451e30 RCX: ffff888114528000 [ 33.177923][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.185967][ T372] RBP: ffffc90001affc88 R08: 0000000000000003 R09: 0000000000000004 [ 33.193998][ T372] R10: dffffc0000000000 R11: fffff5200035ff7c R12: dffffc0000000000 [ 33.202062][ T372] R13: 1ffff11025a8a3cf R14: ffff88812d451e78 R15: 0000000000000000 [ 33.210321][ T372] FS: 000055556ec43500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.219363][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.226110][ T372] CR2: 000055556ec664e8 CR3: 0000000113e4a000 CR4: 00000000003526b0 [ 33.234578][ T372] Call Trace: [ 33.237979][ T372] [ 33.240942][ T372] shmem_rmdir+0x5f/0x90 [ 33.245283][ T372] vfs_rmdir+0x3dd/0x560 [ 33.249579][ T372] incfs_kill_sb+0x109/0x230 [ 33.254229][ T372] deactivate_locked_super+0xd5/0x2a0 [ 33.259655][ T372] deactivate_super+0xb8/0xe0 [ 33.264520][ T372] cleanup_mnt+0x3f1/0x480 [ 33.268973][ T372] __cleanup_mnt+0x1d/0x40 [ 33.273463][ T372] task_work_run+0x1e0/0x250 [ 33.278082][ T372] ? __cfi_task_work_run+0x10/0x10 [ 33.283265][ T372] ? __x64_sys_umount+0x126/0x170 [ 33.288327][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.293777][ T372] ? __kasan_check_read+0x15/0x20 [ 33.298841][ T372] resume_user_mode_work+0x36/0x50 [ 33.304006][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 33.310014][ T372] do_syscall_64+0x64/0xf0 [ 33.314498][ T372] ? clear_bhb_loop+0x50/0xa0 [ 33.319230][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.325181][ T372] RIP: 0033:0x7f86349902f7 [ 33.329633][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.349359][ T372] RSP: 002b:00007ffcb2ca1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.357994][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f86349902f7 [ 33.366061][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb2ca12d0 [ 33.374169][ T372] RBP: 00007ffcb2ca12d0 R08: 0000000000000000 R09: 0000000000000000 [ 33.382218][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb2ca2360 [ 33.390214][ T372] R13: 00007f8634a11d7d R14: 0000000000008130 R15: 00007ffcb2ca23a0 [ 33.398243][ T372] [ 33.401318][ T372] ---[ end trace 0000000000000000 ]--- [ 33.406904][ T372] ================================================================== [ 33.415079][ T372] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 33.421427][ T372] Write of size 4 at addr 0000000000000168 by task syz-executor/372 [ 33.429408][ T372] [ 33.431742][ T372] CPU: 0 UID: 0 PID: 372 Comm: syz-executor Tainted: G W syzkaller #0 13e4930ead2c4bb99e6e1e727baa5d081f82ad96 [ 33.431766][ T372] Tainted: [W]=WARN [ 33.431772][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.431781][ T372] Call Trace: [ 33.431787][ T372] [ 33.431793][ T372] __dump_stack+0x21/0x30 [ 33.431819][ T372] dump_stack_lvl+0x10c/0x190 [ 33.431840][ T372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.431863][ T372] print_report+0x3d/0x70 [ 33.431880][ T372] kasan_report+0x163/0x1a0 [ 33.431899][ T372] ? ihold+0x24/0x70 [ 33.431917][ T372] ? _raw_spin_unlock+0x45/0x60 [ 33.431937][ T372] ? ihold+0x24/0x70 [ 33.431953][ T372] kasan_check_range+0x299/0x2a0 [ 33.431973][ T372] __kasan_check_write+0x18/0x20 [ 33.431996][ T372] ihold+0x24/0x70 [ 33.432012][ T372] vfs_rmdir+0x26a/0x560 [ 33.432034][ T372] incfs_kill_sb+0x109/0x230 [ 33.432060][ T372] deactivate_locked_super+0xd5/0x2a0 [ 33.432089][ T372] deactivate_super+0xb8/0xe0 [ 33.432109][ T372] cleanup_mnt+0x3f1/0x480 [ 33.432127][ T372] __cleanup_mnt+0x1d/0x40 [ 33.432148][ T372] task_work_run+0x1e0/0x250 [ 33.432168][ T372] ? __cfi_task_work_run+0x10/0x10 [ 33.432186][ T372] ? __x64_sys_umount+0x126/0x170 [ 33.432208][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.432231][ T372] ? __kasan_check_read+0x15/0x20 [ 33.432259][ T372] resume_user_mode_work+0x36/0x50 [ 33.432278][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 33.432296][ T372] do_syscall_64+0x64/0xf0 [ 33.432316][ T372] ? clear_bhb_loop+0x50/0xa0 [ 33.432334][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.432351][ T372] RIP: 0033:0x7f86349902f7 [ 33.432364][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.432379][ T372] RSP: 002b:00007ffcb2ca1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.432396][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f86349902f7 [ 33.432406][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb2ca12d0 [ 33.432416][ T372] RBP: 00007ffcb2ca12d0 R08: 0000000000000000 R09: 0000000000000000 [ 33.432426][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb2ca2360 [ 33.432437][ T372] R13: 00007f8634a11d7d R14: 0000000000008130 R15: 00007ffcb2ca23a0 [ 33.432450][ T372] [ 33.432456][ T372] ================================================================== [ 33.677664][ T372] Disabling lock debugging due to kernel taint [ 33.683969][ T372] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 33.691806][ T372] #PF: supervisor write access in kernel mode [ 33.697897][ T372] #PF: error_code(0x0002) - not-present page [ 33.703877][ T372] PGD 8000000113e81067 P4D 8000000113e81067 PUD 0 [ 33.710406][ T372] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 33.716475][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz-executor Tainted: G B W syzkaller #0 13e4930ead2c4bb99e6e1e727baa5d081f82ad96 [ 33.729584][ T372] Tainted: [B]=BAD_PAGE, [W]=WARN [ 33.734691][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.744744][ T372] RIP: 0010:ihold+0x2a/0x70 [ 33.749256][ T372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 33.768859][ T372] RSP: 0018:ffffc90001affca0 EFLAGS: 00010246 [ 33.774922][ T372] RAX: ffff888114528000 RBX: 0000000000000000 RCX: ffff888114528000 [ 33.782888][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.790882][ T372] RBP: ffffc90001affcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 33.798873][ T372] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88812d451e3c [ 33.806841][ T372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 33.814811][ T372] FS: 000055556ec43500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.823735][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.830322][ T372] CR2: 0000000000000168 CR3: 0000000113e4a000 CR4: 00000000003526b0 [ 33.838295][ T372] Call Trace: [ 33.841573][ T372] [ 33.844535][ T372] vfs_rmdir+0x26a/0x560 [ 33.848787][ T372] incfs_kill_sb+0x109/0x230 [ 33.853384][ T372] deactivate_locked_super+0xd5/0x2a0 [ 33.858760][ T372] deactivate_super+0xb8/0xe0 [ 33.863439][ T372] cleanup_mnt+0x3f1/0x480 [ 33.867859][ T372] __cleanup_mnt+0x1d/0x40 [ 33.872276][ T372] task_work_run+0x1e0/0x250 [ 33.876866][ T372] ? __cfi_task_work_run+0x10/0x10 [ 33.881987][ T372] ? __x64_sys_umount+0x126/0x170 [ 33.887021][ T372] ? __cfi___x64_sys_umount+0x10/0x10 [ 33.892396][ T372] ? __kasan_check_read+0x15/0x20 [ 33.897428][ T372] resume_user_mode_work+0x36/0x50 [ 33.902552][ T372] syscall_exit_to_user_mode+0x64/0xb0 [ 33.908038][ T372] do_syscall_64+0x64/0xf0 [ 33.912471][ T372] ? clear_bhb_loop+0x50/0xa0 [ 33.917152][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.923046][ T372] RIP: 0033:0x7f86349902f7 [ 33.927465][ T372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.947069][ T372] RSP: 002b:00007ffcb2ca1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.955577][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f86349902f7 [ 33.963566][ T372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb2ca12d0 [ 33.971546][ T372] RBP: 00007ffcb2ca12d0 R08: 0000000000000000 R09: 0000000000000000 [ 33.979514][ T372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb2ca2360 [ 33.987511][ T372] R13: 00007f8634a11d7d R14: 0000000000008130 R15: 00007ffcb2ca23a0 [ 33.995573][ T372] [ 33.998610][ T372] Modules linked in: [ 34.002516][ T372] CR2: 0000000000000168 [ 34.006663][ T372] ---[ end trace 0000000000000000 ]--- [ 34.012116][ T372] RIP: 0010:ihold+0x2a/0x70 [ 34.016621][ T372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 34.036255][ T372] RSP: 0018:ffffc90001affca0 EFLAGS: 00010246 [ 34.042327][ T372] RAX: ffff888114528000 RBX: 0000000000000000 RCX: ffff888114528000 [ 34.050300][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.058268][ T372] RBP: ffffc90001affcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 34.066236][ T372] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88812d451e3c [ 34.074206][ T372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 34.082186][ T372] FS: 000055556ec43500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.091118][ T372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.097728][ T372] CR2: 0000000000000168 CR3: 0000000113e4a000 CR4: 00000000003526b0 [ 34.105885][ T372] Kernel panic - not syncing: Fatal exception [ 34.112134][ T372] Kernel Offset: disabled [ 34.116476][ T372] Rebooting in 86400 seconds..